Nzira yekuziva sei kana email iri phishing kana yakachengeteka

Kugashira meseji inonzi inobva kubhangi rako, kambani yekuendesa mapasuru, kana siginecha yedhijitari inogona kuita kuti usvinure. Cybercriminals vanogara vachivandudza maemail avanotumira. kuita kuti varatidzike sezviri pamutemo uye kukuita kuti udzvanye, dhawunirodha chimwe chinhu, kana kugovana data rakakomba. Sezvineiwo, pane zviratidzo zvakajeka zvekuvasiyanisa uye nzira dziri nyore dzekutarisa kana email yakavimbika.

Mugwaro iri uchawana Nzira yekuziva sei phishing scam nemienzaniso yakajairika, maitiro ekuongorora zvinongedzo, vanotumira uye misoro, pamwe nekuita kana iwe watodzvanya kana kupa data usingadi. Isu tinobatanidza maitiro akanakisa kubva kumakambani nemasangano anobata nehutsotsi uhu zuva nezuva.Kubva kumabhangi nemasaina masevhisi kune veruzhinji manejimendi, kuti iwe ugone kuongorora chero meseji nehungwaru.

Chii chinonzi phishing uye nei chichishanda?

Phishing imhando yeinjiniya yemagariro inoedza kunyengedza munhu akabatwa kuti amupe ruzivo rwakavanzika kana kuisa malware. malware kuita sechinhu chakavimbika. Chinangwa chinowanzova chekuba zvitupa, ruzivo rwebhangi, kana kutonga maakaundi.asi zvakare shandura kubhadhara kana kukanganisa michina kuti ishande kwenguva refu.

Aya matsotsi anobudirira nekuti anoteedzera mabhureki anozivikanwa, kukopa logos, uye kunyange kudzokorora dhizaini. na uye mawebhusaiti epamutemo. Vanorwisa vanotaura nyaya inotendwa kuti vamanikidzire kuita nokukurumidza: cheki dzechimbichimbi, marisiti ausingazive, chenjedzo dzinofungidzirwa dzekuchengetedza, kana kudzoserwa mutero kunokwezva.

Maemail e phishing uye mameseji eSMS anotaridzika sei

Maemail ehutsotsi uye mameseji mameseji anoonekwa nekukukumbira kuti uite chimwe chinhu nekuchimbidza: simbisa account, vhura chinongedzo, "reactivate" sevhisi, kana simbisa kubhadhara. Iyo fomati iri kuwedzera kuve nyanzvi, asi ivo vanowanzosiya zviratidzo. kana iwe ukanyatsotarisisa kune anotumira, zvinongedzo, mazwi, uye domain yavanotungamira.

Kune zvakare SMiShing (kuburikidza neSMS), iyo inodzokorora yakafanana pateni asi pafoni yako. Iyo modus operandi yakafanana: vanokusundidzira kuti udzvanye chinongedzo kana kurodha faira kubva kune meseji inoita seinobva kubhangi rako, kambani yezvifambiso, kana sevhisi yaunowanzo shandisa.

Zviratidzo zvekuona email ine chitsotsi

Zvinokurudzirwa kunyatsoongorora meseji yega yega. Aya mabhegi matsvuku haasi ega, asi pamwe chete anowedzera kufungirana. kuti wakatarisana nekuyedza phishing:

• Kukanganisa kwemaitiro: kukanganisa, syntax yakasarudzika, mataurirwo anoshamisa kana zvinyorwa zvisiri zvechisikigo. Mhosho dzezviperengo dzinoramba dziri chiratidzo chinowanzoitika.
• "Zvinoshamisa" magiraidhi: pixelated logos, akakanganiswa zviyero, kana mifananidzo isingaremekedze dhizaini yakajairwa. Kana iyo branding isingakwane, nyumwa..
• Kwaziso dzeGeneric: "Anodiwa mutengi" mukambani inofanirwa kukudaidza nezita rako. Kushaikwa kwemunhu kunoratidza kutumira kwevazhinji.
• Artificial emergency: mazuva ekupedzisira emaminitsi, kutyisidzira kwekuvhara account kana "mukana wekupedzisira". Kudzvanyirira nguva inzira yekare.
• Zvisingatarisirwi zvakanamirwa (ZIP, RAR, zvinotemerwa) uye mainvoice asingaenderane. Mafaira akadzvanywa anowanzovanza malware.
• Camouflaged links zvisingaenderane neiyo official domain. Kana iwe usingaone URL yepamutemo paunotenderedza mbeva yako pamusoro payo, usadzvanya..

Nzira yekusimbisa sei zvinongedzo uye madomasi

Musati madyidzana, tarisai kwainoenda chaiko. Hover cursor yako pamusoro peiyo link pasina kubaya Tarisa URL inoonekwa mubhawa yeemail yako kana browser. Panharembozha, baya uye ubate chinongedzo kuti uone kero.

Imwe nzira yakachengeteka ndeyekukopa iyo URL pasina kuivhura: Tinya-kurudyi, kopira chinongedzo, uye chinamira mugwaro. Idzokorore nokungwarira. Kana iwe ukaona zviperengo zvisirizvo, zvisinganzwisisike subdomain, kana tambo dzehunhu dzinofungidzirwa, usavhure.

Chenjera ne tricks Zvinoonekwa: “docusing.com” kuenda ku “docusign.com”, tsiva “l” na“1” kana wedzera mazwi pamberi penzvimbo yepamutemo kuti aoneke ari pamutemo. Kuvapo kwechivharo kana "https" hakuvimbisi kuve pamutemo kana iyo domain isiri iyo..

Mhando dzakawanda dze phishing scams

Matsotsi anosiyana-siyana chirauro zvichienderana nemwaka uye zviitiko zvazvino, asi mamwe maitiro anodzokororwa. Kuziva zvinyorwa izvi kunobatsira kuti uzvizive mumasekonzi:

• Maakaundi akamiswa: mameseji anoti akavharira kubhengi kwako pamhepo nekuda kwechiitiko chisina kujairika. Kana risiri bhangi rako, ridzime; kana zvirizvo, simbisa kuburikidza nezviteshi zviri pamutemo..
• Zviviri-chinhu chechokwadi (2FA): kuedza kukuita kuti ubvumidze kupinda kana kuisa macode kuti "usimbise chitupa". Iva anonyumwira kana usina kutanga hurongwa..
• Kudzoserwa kwemutero: kufungidzirwa kutaurirana kubva kuTax Agency nemari isingatarisirwe. Ivo vanovimba nekukumbira yakanyanya kusimba data uye havaigamuchire kuburikidza neemail..
• Zvisimbiso zveOdha: marisiti kana ma invoice ekutenga kwausina kuita nezvakanamirwa zvine hutsinye. Kubatanidzwa kunowanzova kurwisa pachako.
• CEO hutsotsi uye phishing yepabasa: maemail anoedzesera mabhosi kana vatengi vachikumbira kubhadhara nekukurumidza. Tarisa mukati usati wafambisa euro.
• Kubira Digital: maemail anozviti ane "kukanganisa" mavhidhiyo ako uye arikuda rudzikinuro. Vari kuedza kukutyisidzira kuti ubhadhare; usabvuma..

Kana phishing ichiedza kusaonekwa

Dzimwe phishing kits dzinosanganisira JavaScript kuona kana webhusaiti iri kuongororwa pamushini chaiwo kana neautomated system. Kana vakaona ongororo, vanogona kuratidza peji isina chinhu kuti vapfuure maturusi ekuchengetedza.Kugara uchiziva nezvemaitiro ekubiridzira kunokubatsira kuziva misungo iri kubuda.

Masaini chaiwo anopihwa nemamwe masevhisi

Mapuratifomu uye makambani ane tarisiro yakasimba pakuchengetedza anopa zviratidzo zvakajeka zvekusimbisa maemail. Zvimwe zviratidzo zvinobatsira chaizvo kana iwe uchiziva yavo yekutaurirana mutemo:

• Masiginecha emagetsi: Maemail ari pamutemo anokukoka kuti usaine haasanganisire zvinobatika kana ZIP zvakanamirwa, uye wedzera yakasarudzika kodhi kodhi kune iyo chiziviso. Kana iyo kodhi isipo kana chinongedzo chisina kunongedzera kune yavo yepamutemo domain, chenjera..
• Mapasuru uye kutumira: vamwe vashandisi vanosanganisa makodhi anovimbiswa mumaemail avo. Tarisa kodhi pane webhusaiti yepamutemo usati wabata chero chinhu..
• Email vatengi: mamwe maapplication anomaka vasina kutenderwa vatumira ne "?". Kana iwe ukaona zviratidzo Mazita asina kujairika aunoziva anogona kuedzesera.Funga zvingasarudzwa chengetedza email musangano rako.

Fake mutumi uye email spoofing

Email spoofing inobvumira anorwisa kuti agadzirise iyo "Kubva" ndima kuti iite senge meseji inotumirwa nemumwe munhu kana kambani. Kunyengedza uku kunogoneka nekuti SMTP, iyo email protocol, haidi kuvimbiswa nekukasira..

Pamusoro pekunyengedza mugamuchiri (akabatwa zvakananga), zvinogona zvakare kukuvadza muridzi wekero yakaedzerwa (asina kunanga akabatwa). Paunenge uchibiridzirwa, mumwe munhu anogona kunge ari kuteedzerwa asingazvizivi., nekukanganisa mukurumbira wavo kana hukama hwavo.

Maitiro ekuverenga misoro uye kuona authentication

Maemail misoro ane anobatsira ehunyanzvi data: maseva aapfuura nawo, mazuva ekufambisa, kutumira mutengi, uye zvisizvo zvakaita seSPF kana DKIM. Kudziongorora kunobatsira kuona kana iyo email ichienderana neiyo domain inoti ndiyo inotumira..

Nhanho dzekukurumidza zvinoenderana nemutengi wako weemail: MuOutlook, vhura meseji muhwindo idzva uye enda kuFaira> Ruzivo> Zvivakwa Kuti uwane "Misoro yeInternet," muGmail, ivhure, dzvanya madotsi matatu, uye sarudza "Ona meseji kunobva." MuYahoo, tsvaga "Tarisa meseji yakabikwa."

Neruzivo irworwo unogona kushandisa zvishandiso zvinopwanya musoro kuti uzvione zvakajeka. Inoturikira data se el tiempo kuendesa, iyo Kubva domain, uye iyo SPF uye DKIM mhinduroSemuyenzaniso: nguva refu isingaenzaniswi, madhomeini asina kuenderana, kana kukanganisa kweDKIM zvese zviratidzo zveyambiro.

Maitiro akanakisa ekusarudza kana email yakavimbika

Mutemo wegoridhe ndewekutarisa kuburikidza nezviteshi zvepamutemo zvavanokukumbira kuti uite mune email. Kana iwe uine account, pinda kuburikidza neyako yakajairika app kana webhusaiti, kana kufonera iyo nhamba yaunotoziva.Usashandise nhamba dzenhare kana zvinongedzo kubva pameseji inonyumwira.

Wongorora zvese zvinoonekwa uye zvinyorwa zvemukati: kwaziso, toni, kukanganisa, logos, uye domain kusachinja-chinjaUye yeuka kuti makambani mazhinji ari pamutemo haakubvunze iwe kuti uvandudze data rakadzama kuburikidza nezvinongedzo mumaemail asina kukumbirwa.

Zvekuita kana iwe ukagamuchira phishing emails mubhokisi rako rekunyora

Kana iwe ukaona kuedza mubhokisi rako rekunyora, sarudzo yakachengeteka haisi yekuivhura. Vamwe vatengi veemail vanobvumira zvinyorwa kuti zvishande paunovhura email, saka zviri nani kuidzima pasina kutaurirana navo..

Kana usingakwanise kudzivirira kuivhura, usambodhawunirodha zvakabatanidzwa kana kudzvanya pane zvinongedzo. Vimba mutumi nemawoko kana maneja weakaunti yako achibvumira uye wedzera iyo domain kune yakavharika rondedzero, kunyanya kana iwe ukagovera bhokisi retsamba nemumwe munhu angangozviwisira.

Kusimbisa dziviriro yako neakanaka antivirus uye antispam mafirita anobatsira zvakare. Kusvika-date kuchengetedza software inogona kuona zvakashata zvakabatanidzwa kana maURL ane njodzi. vasati vakuvadza; kunharaunda dzemakambani, funga nezvemhinduro dzakadai se Defender yeHofisi 365.

Email verification uye kuratidzwa mukutyorwa kwedata

Kana usina chokwadi chekuti kero iripo here kana kuti iri kushanda, unogona kushandisa email yekuongorora masevhisi anosimbisa syntax uye kuwanikwa kwebhokisi retsamba paserver. Zvishandiso izvi zvinokutendera kuti uone kero dzenhema kana dzakapera nguva pasina kutumira email chaiyo..

Pamusoro pezvo, dzimwe mhinduro dzinokutendera kuti utarise kana kero yako yakaonekwa mukutyora data. Kana email yako yakakanganiswa, shandura mapassword ako uye gonesa multi-factor kuvimbiswa. kuderedza kukanganisa.

Mienzaniso chaiyo: mabhangi, mutero, kuendesa pasuru, uye masiginecha

Kubhenga: Kana ukaziviswa nezvekupinda nekufungira kana mabhuroko, usadzvanyirire chero chinhu. Vhura iyo yepamutemo app kana kufonera nhamba yefoni yakanyorwa pakadhi rako kana webhusaiti.Usagovana mapassword kuburikidza neemail.

Mutero Agency: mushandirapamwe wega wega unounza maemail ane “kudzoserwa” kusingatarisirwe. Sangano harigadzirise kudzoserwa mari nekukumbira ruzivo rwako kuburikidza neemail.Uye maemail anokumbira nhamba dzeakaundi kana nhamba dzeID anowanzo musungo.

Makambani ekutumira mapasuru: mamwe makambani akaisa macode anovimbiswa mumaemail avo ekutumira. Isa iyo kodhi pawebhusaiti yepamutemo kuti uone kuti meseji ndeyechokwadi uye dzivisa phishing clones.

Digital siginecha masevhisi: tarisa kuti iyo email inosanganisira yakasarudzika kodhi kodhi muchiziviso uye kuti zvinongedzo zvinonongedza kune chaiyo domain. Kukoka kuri pamutemo kusaina hakusanganisire ZIP zvakanamirwa kana mafaera anogona kuitiswa.uye havazokubvunzei mapassword neemail.

Dziviriro yehunyanzvi uye maitiro anoita mutsauko

Shandisa otomatiki zvigadziriso pakombuta yako uye nharembozha. Zvimedu zvinogadzirisa kusasimba kunoshandiswa nevanorwisa.Uye kuchengetedza hurongwa hwemazuva ano kunoderedza zvakanyanya njodzi.

Gadzira ma backups eruzivo rwako. Chengetedza kana imwe backup kunze kwekombuta yako kana mugore. kupora kana chimwe chinhu chisina kumira zvakanaka kana kuti ukabatwa nemalware.

Zvekuita kana ukadzvanya kana kupa data

Kana iwe ukadzvanya pane chinongedzo uye wamhara pane inofungidzira webhusaiti, usaise chero chinhu uye wovhara peji. Gadziridza antivirus yako, mhanyisa scan, uye bvisa chero kutyisidzira kwaonekwa. muchikwata.

Kana iwe wakagovana ruzivo rwakadzama (kadhi, account yekubhangi, ID), bata bhangi rako uye shandura mapassword ako. Shandisa zviyeuchidzo zvezviitiko uye MFA pazvinogonekaKana iwe wakapa ruzivo rwechitupa chako, tevera nzira inokurudzirwa nevakuru vane hunyanzvi munyika yako kuti ugadzirise nyaya yekuba chitupa.

Kana iyo email ichitevedzera chaiyo sevhisi (semuenzaniso, siginecha chikuva), tarisa kana mupi uyu aine chiteshi chekuzivisa. Mamwe makambani anokukumbira kuti utumire email yehutsotsi kana kunyorera kubhokisi retsamba rakatsaurirwa kushungurudza. kuvharisa mishandirapamwe.

Nzira yekushuma sei kuedza kwe phishing

Kuzivisa kunobatsira kuderedza kusvika kweiyi mishandirapamwe. Shandisa iyo "Report phishing" kana "Spam" sarudzo mune yako email mutengi uye, kana zvakakodzera, zvitumire kudhipatimendi rezvokuchengetedza rekambani inoedzesera.

Munzvimbo dzemakambani, zivisa iyo IT kana timu yekuchengetedza kuti iparadzanise mameseji akafanana uye kuzivisa vamwe vashandisi. Kurumidza kudamburwa cheni, vanobatwa vashoma vanenge varipo. uye zvichave nyore kudzikamisa mushandirapamwe.

Zviratidzo mune email vatengi vakaita seOutlook

Vamwe vatengi vanoratidza zviratidzo zvinoonekwa kana chimwe chinhu chisinga wedzere. Kana ukaona "?" mumufananidzo weanotumira, zvinogona kuratidza kuti meseji haina kutenderwa.Hazvirevi kuti ine hutsinye, asi inoda kungwarira.

Vanogonawo kuratidza kana kero chaiyo yemunhu anenge atumira isingaenderane neiri kuratidzwa muchikamu che "Kubva". Kana mutengi akasimbisa mutsauko, chiratidzo chakasimba chekutevedzera. uye chikonzero chakakwana chekusadyidzana. Kana iwe uchida kudzoreredza mameseji akadzimwa nekukanganisa, tevera matanho aya kuti Dzorera maemail akadzimwa muOutlook.

Mienzaniso inoshanda yemushandirapamwe yaunowanzo kuona

Aya matemplate anonyengera anotenderera gore rose ane zvishoma zvigadziriso. Kana ukaaziva kamwe chete, uchaona zviri nyore kuaziva panguva inotevera.:

• Fake resume kana application: CV inosvika negwaro rine hutachiona. Iyo yekunamatira ndiyo malware vector.
• Kuvandudzwa kwesevhisi kusipo: maemail anoedza kukuita kuti ubhadhare sevhisi yausina. Chinangwa ndechekuunganidza data yekubhadhara.
• Yakanakisa invoice: tora mukana wemaitiro ako kubhadhara pasina ongororo. Nguva dzose tarisa uyo anopa uye mari.
• Mibairo isingagoneki kana makuponi: inopa yakanyanyisa kunaka kuti ive chokwadi. Chirevo chinovanza chinongedzo chakashata.
• Chengetedzo yekuzivisa yenhema: "takaona zvinoshamisa chiitiko" chinokusvitsa iwe kune yekupinda clone. Usapinde uchishandisa chinongedzo.
• Mharidzo dzesocial media: dzinofungidzirwa kukumbira kana mameseji akananga ane phishing link. Svika kubva kune yepamutemo app.
• Kubira nekamera "kubira": blackmail kukuita kuti ubhadhare rudzikinuro. Zvinoitirwa kukutyisa; usazviwisire..

Kana sangano rikasakubata neemail

Tarisai mutemo wezvekutaurirana wesangano rega rega. Kune masangano asingakumbire data remunhu kuburikidza neemail uye sarudza zviziviso kuburikidza nedzimwe nzira dzepamutemo. Kuziva maitiro aya kunokubatsira kuti urege kuwira maemail anoshandisa zita ravo.

Munguva dzemishandirapamwe yakaoma senge mutero wekudzorera mutero, ma scammers anowedzera kutumira nevimbiso yekudzoka kwekutaura. Kana meseji ichikumbira ruzivo rwemari kuburikidza neemail, nyumwa nekukurumidza. uye yakasimbiswa kuburikidza nezviteshi zvepamutemo.

Matanho anokurumidza kana iwe uchitonga timu kana kambani

Ita kudzidziswa kwenguva dzose mukutsvaga phishing uye kutevedzera mishandirapamwe yemukati kuyera kugadzirira. Simbisa SPF, DKIM, uye DMARC pane yako domain kuderedza spoofing. uye uvandudze mukurumbira wekutakura kwako; tarisawo a Google Workspace vs Microsoft 365 kuenzanisa kusarudza chikuva chakakodzera.

Gadzira kuyerera kwakajeka kwekuzivisa (semuenzaniso, bhatani rakati kana bhokisi retsamba) uye tsanangura mapuroteni ekusimbisa ekukurumidza kutamiswa. Kune zvikumbiro zveatypical, zvinoda kusimbiswa kwechipiri kuburikidza neimwe nzira. yeiyo email.

Kana mhando yaunovimba ikakubata, shandisa yavo yakajairika webhusaiti kana app kuti uwane account yako. Usatore zvakanamirwa kana kudzvanya pane zvinongedzo zvinosimudzirwa nemaemail asina kukumbirwakunyangwe dhizaini yacho yakanaka.

Kugara wakadzikama uye kutora masekonzi mashoma kuratidza munhu anotumira, zvinongedzo, uye kuenderana kwemeseji kunodzivirira zviitiko zvakawanda. Iyi nhungamiro inokupa iwe kugona kusiyanisa pakati pekutaura kwechokwadi nekunyengera.Uye iwe unozoziva maitiro ekuita kana chimwe chinhu chatotsvedza kunze.